Live › vulnerability › CVE-2026-62056
Fluent CRM, a WordPress marketing and CRM plugin by WP ManageNinja LLC, has a missing authorization check in versions through 3.2.6. The sources say an attacker can exploit incorrectly configured access control levels to reach functions they should not.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 19:25 UTC. All times on this page are UTC.
Sites running the Fluent CRM WordPress plugin at version 3.2.6 or earlier are in the affected range, per NVD. The sources do not say which roles or endpoints are affected, or which configurations expose them. Sites that do not run the plugin can skip it.
No product ranges from the sources yet.
wp plugin get fluent-crm --field=versionNo fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-62056")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.